PHPackages                             utexas/utexas\_pantheon\_logs\_http - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [HTTP &amp; Networking](/categories/http)
4. /
5. utexas/utexas\_pantheon\_logs\_http

ActiveDrupal-custom-module[HTTP &amp; Networking](/categories/http)

utexas/utexas\_pantheon\_logs\_http
===================================

Client for the UTexas Pantheon Logs HTTP API.

2.2.1(1mo ago)3160.8k↑49.5%12GPL-2.0-or-laterPHP

Since Sep 24Pushed 1mo ago3 watchersCompare

[ Source](https://github.com/utdk/utexas_pantheon_logs_http)[ Packagist](https://packagist.org/packages/utexas/utexas_pantheon_logs_http)[ Docs](https://github.austin.utexas.edu/eis1-wcs/utexas_pantheon_logs_http)[ RSS](/packages/utexas-utexas-pantheon-logs-http/feed)WikiDiscussions develop Synced 2d ago

READMEChangelogDependencies (4)Versions (15)Used By (2)

UTexas Pantheon Logs HTTP
=========================

[](#utexas-pantheon-logs-http)

> Provides JSON event pushing to Splunk Logs via the tag/http endpoint.

This module is based on the [Logs HTTP](https://www.drupal.org/project/logs_http) contrib module, which wass designed as a generalized solution for pushing Watchdog logs to an HTTP endpoint such as [Logstash](http://logstash.net/), or paid services such as [Loggly](loggly.com).

This custom fork adds needed functionality to allow Watchdog logs on a Pantheon-hosted site to be pushed to the [UT Austin Splunk instance](https://splunk.security.utexas.edu) via a [Splunk HTTP Event Collector (HEC)](https://dev.splunk.com/enterprise/docs/devtools/httpeventcollector/).

The HTTP connection code has been modified to meet the requirements of Pantheon's [Secure Integration](https://pantheon.io/docs/secure-integration) platform feature, which allows the messages to be sent over an existing secure tunnel between Pantheon and the UT Austin network.

This module also allows the use of a secure token which is required for connection to the Splunk HEC. See [(Splunk) HTTP Event Collector (HEC)](https://wikis.utexas.edu/pages/viewpage.action?pageId=196975636) for more information about HEC configuration.

The configuration that is provided, consists of variables which make the connection between Pantheon logs and Splunk, the variables are:

- **Endpoint**: The Splunk URL which is "pinged" with the event Post request
- **Secure integration constant name**: A Pantheon specific constant which holds a port that is required to build the URL (along with the endpoint) to connect into Splunk
- **Watchdog Severity**: The watchdog severity level value, which is set to log anything between *Info* and *Error* (anything but debug messages)

There is one last variable needed, but no provided by default for the field: **Splunk HTTP Event Collector Token**.

Requirements
------------

[](#requirements)

- Drupal 9
- Existing Pantheon Secure Integration configuration, configured with the IP address and port number of the UT Austin Splunk instance
- Existing Splunk HTTP Event Collector, configured with allow-list of Pantheon IP addresses provided by the Secure Integration configuration.

How to use
----------

[](#how-to-use)

After enabling the module, default config will be set at `admin/config/services/logs-http-client`.

The `Splunk HTTP Event Collector Token`, will need to be uploaded via SFTP (if not provisioned by Jenkins), which can be found in [Stache](https://stache.utexas.edu/) as `Splunk HEC Token PantheonAppLogs`. The new file has to be named `splunk_settings.json`, has to be uploaded into `/files/private/splunk`, and has to have the following format:

```
{
	"splunk_settings":{
		"splunk_hec_token":"[the-token-value]"
	}
}

```

Once this is set, any subsequent watchdog logging shall send logs into Splunk. To verify that the site is logging data correctly, you can go to `admin/config/services/logs-http-client` and look for a message at the top stating if the `Splunk Auth token` was either found or not found. Or, access this [Splunk link](https://splunk.security.utexas.edu/en-US/app/ut_eis1/search?q=search%20index%3Dservice-webpublishing%20source%3Dhttp%3APantheonAppLogs%20request_uri%3D%22https%3A%2F%2Flogs-http-utexas-its2.pantheonsite.io%2F*%22&display.page.search.mode=verbose&dispatch.sample_ratio=1&earliest=0&latest=&sid=1632159770.689754_8220FB8F-01FA-4F7E-929B-F56DE7E31D3B) and replace the `request_uri` parameter with `https://yourpantheonsite.pantheonsite.io/*`. If you get a hit while searching results, the module has beeen configured correctly.

Debugging
---------

[](#debugging)

Using the Logger class to print notices on your watchdog logs is the best way to debug this module's content.

###  Health Score

55

—

FairBetter than 97% of packages

Maintenance90

Actively maintained with recent releases

Popularity37

Limited adoption so far

Community22

Small or concentrated contributor base

Maturity59

Maturing project, gaining track record

 Bus Factor1

Top contributor holds 90.6% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

###  Release Activity

Cadence

Every ~169 days

Recently: every ~283 days

Total

11

Last Release

50d ago

Major Versions

1.x-dev → 2.0.02023-04-07

### Community

Maintainers

![](https://avatars.githubusercontent.com/u/4305692?v=4)[Mark Fullmer](/maintainers/markfullmer)[@markfullmer](https://github.com/markfullmer)

![](https://avatars.githubusercontent.com/u/38081?v=4)[Paul Grotevant](/maintainers/gravelpot)[@gravelpot](https://github.com/gravelpot)

![](https://www.gravatar.com/avatar/fa3a96320e299ee08a876e9459864ddb48fbb4a5347727a0c4926227b3245677?d=identicon)[pfgutexas](/maintainers/pfgutexas)

![](https://avatars.githubusercontent.com/u/2952371?v=4)[Doug Addison](/maintainers/daddison)[@daddison](https://github.com/daddison)

![](https://avatars.githubusercontent.com/u/21373356?v=4)[bjc2265](/maintainers/bjc2265)[@bjc2265](https://github.com/bjc2265)

![](https://avatars.githubusercontent.com/u/1998924?v=4)[Marcus Marler](/maintainers/marcusmarler)[@marcusmarler](https://github.com/marcusmarler)

---

Top Contributors

[![jmf3658](https://avatars.githubusercontent.com/u/34824280?v=4)](https://github.com/jmf3658 "jmf3658 (29 commits)")[![markfullmer](https://avatars.githubusercontent.com/u/4305692?v=4)](https://github.com/markfullmer "markfullmer (3 commits)")

---

Tags

drupal

### Embed Badge

![Health badge](/badges/utexas-utexas-pantheon-logs-http/health.svg)

```
[![Health](https://phpackages.com/badges/utexas-utexas-pantheon-logs-http/health.svg)](https://phpackages.com/packages/utexas-utexas-pantheon-logs-http)
```

###  Alternatives

[helsingborg-stad/municipio

A bootstrap theme for creating municipality sites.

4028.5k10](/packages/helsingborg-stad-municipio)[pressbooks/pressbooks-book

This theme is named after Canadian media theorist Marshall McLuhan, who coined the phrase “the medium is the message.” It is designed for academic writing and is also suitable for fiction. Headings are set in Cormorant Garamond, and body type is set in Lora.

216.7k](/packages/pressbooks-pressbooks-book)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)
